32-bit Embedded Security

Our MCUs provide a variety of security functions that can be customized to meet a wide range of protection needs. 

Symmetric Cryptography (Secret Key)
Symmetric-key algorithms use the same cryptographic keys for the encryption of plaintext and the decryption of ciphertext.

Asymmetric Cryptography (Public Key)
Public-key cryptography, or asymmetric cryptography, is any cryptographic system that uses pairs of keys: public keys that may be disseminated widely and private keys that are known only to the owner.

Integrity Check Monitors (Message Hash)
Message hashes transform variable-length data to a fixed-length piece of data. Integrity check monitors generate and validate message hash to preserve data integrity.

Hardware Root of Trust (Secure Boot)
Secure boot is implemented by an MCU that starts executing software from an internal, immutable memory (for example, ROM). The software stored in the MCU is considered inherently trusted (i.e., the root of trust) because it cannot be modified.

Secure Firmware Upgrade (Secure Bootloader)
A bootloader is a small section of code that is added to the main application stored in the Flash memory of the MCU. Its role is to load a new program at boot that provides the ability to download firmware upgrades. A secure bootloader is essential to protect IP and assets from remote attacks.

True Random Number Generator
This hardware-based random generator offers a higher source of entropy for the generation of keys used in cryptographic applications.

Tamper Detection
An MCU can be programmed to take appropriate defensive actions upon detecting any primarily physical attempts to compromise a device’s integrity or the data associated with the device.

Secure Key Storage
This feature protects nonvolatile and volatile keys from remote and physical attacks.

Key Provisioning
Secret identity data and cryptographic keys are injected in a secure environment to maintain the authenticity and integrity of an embedded application.

Hardware Isolation, IP Protection and TrustZone Technology
IP can be protected by hardware-enforced isolation between the trusted and the untrusted resources of an application.

Device Identifier Composition Engine (DICE) 
DICE is a combination of hardware and software techniques for hardware-based cryptographic device identity, attestation and data encryption. It is an industry standard supported by Azure® IoT and one of the foundational roots of trust in the Azure data centers of Microsoft®.

Embedded Hardware Security Module (HSM) 
The embedded HSM comes in the form of a secure enclave with cryptographic hardware acceleration, a true random number generator, dedicated memory, dedicated processor, and factory provisioning.